Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e250ccb1-f482-3607-b3e7-28b25771629d.roa
File:                     e250ccb1-f482-3607-b3e7-28b25771629d.roa (raw, json)
Hash identifier:          0Qp/P0ZJvIZTInIkiIIdbX8wItd5SjbfTS2Dpg2Vj0E=
Subject key identifier:   5B:22:53:2C:93:D7:4C:D5:5F:96:E8:59:51:05:A3:B0:C7:04:27:CE
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F4328584D47C50660F9AB9956EBBBD480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e250ccb1-f482-3607-b3e7-28b25771629d.roa
Signing time:             Wed 25 Mar 2026 01:00:32 +0000
ROA not before:           Wed 25 Mar 2026 01:00:32 +0000
ROA not after:            Tue 23 Jun 2026 01:00:32 +0000
asID:                     30036
IP address blocks:        2604:2e8e:1400::/38 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:47:c5:06:60:f9:ab:99:56:eb:bb:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar 25 01:00:32 2026 GMT
            Not After : Jun 23 01:00:32 2026 GMT
        Subject: CN=dbbe309b-9647-44f1-816e-f932f9764f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:1d:8c:2c:85:2f:45:09:95:28:17:45:19:
                    e4:b0:51:41:e0:d8:92:b7:5f:28:12:60:16:3a:22:
                    99:0c:02:1e:50:dc:6e:77:f2:b4:6d:9f:7c:59:7f:
                    fc:35:78:6e:35:77:1d:dc:06:fb:6f:f6:d9:3d:c1:
                    f0:34:fa:b7:5b:b9:11:db:80:2a:7b:2a:db:2f:aa:
                    29:3b:0d:4d:58:b8:27:be:6b:83:9f:3f:b0:56:96:
                    1d:7b:b3:39:1a:0c:1f:ba:d5:0c:d8:8c:ef:e3:b0:
                    da:ff:cb:0b:50:ec:28:c6:b4:fd:1b:2c:44:ba:73:
                    73:32:d4:8a:75:1b:d9:2b:73:ab:52:94:87:ff:fe:
                    0c:cb:c4:9b:a5:e6:c0:a8:d0:8a:56:e6:67:44:d7:
                    ad:30:f3:cb:57:38:4b:4b:b4:3b:19:3d:fe:51:ec:
                    03:91:20:72:cd:b7:37:29:67:a4:d8:a2:aa:13:91:
                    df:d0:a2:c9:af:3a:84:83:74:54:f9:f0:5b:a8:5c:
                    f6:97:49:8a:b0:ff:c0:68:8b:63:3d:fb:dc:8c:14:
                    a1:e8:f4:f3:58:53:7f:3e:5a:23:0a:39:ce:a2:d3:
                    34:d7:43:e5:9d:bd:39:7c:ea:f0:75:01:2c:76:ee:
                    e8:aa:ce:3f:de:05:50:f6:e6:a1:17:73:94:16:6e:
                    85:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:22:53:2C:93:D7:4C:D5:5F:96:E8:59:51:05:A3:B0:C7:04:27:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e250ccb1-f482-3607-b3e7-28b25771629d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:1400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:c3:d4:ee:dc:5f:04:f3:50:33:38:f8:0a:eb:d7:0b:99:ec:
         ef:9b:da:94:09:d3:47:eb:bb:43:9f:00:4d:b3:aa:74:5e:51:
         c8:5b:4e:5f:6b:b3:3a:7c:70:3a:90:99:97:8a:d8:90:90:93:
         92:ff:09:5c:9d:3c:c7:db:bb:75:00:be:3d:ba:ed:bc:4a:84:
         93:73:04:97:79:92:98:62:d1:02:cc:c2:c9:38:6f:a7:79:a6:
         86:32:7f:42:21:47:3c:66:48:6f:67:b9:22:6d:9a:11:2d:72:
         16:77:33:45:0c:15:9a:95:2f:78:58:80:0a:82:97:9b:e2:97:
         1a:f7:8e:c4:fe:5a:ad:3c:27:37:f3:95:0c:31:c9:c0:a3:04:
         ce:18:19:ac:9d:f5:5b:5c:9d:d1:63:0f:a0:a7:03:e1:d8:c7:
         15:3a:b8:35:4d:fd:96:05:18:e1:b2:22:cb:d4:2c:11:12:db:
         aa:43:bf:c2:4d:8d:fe:36:2d:fd:b7:8e:c1:ac:a7:af:64:62:
         71:a0:64:85:68:b9:a4:b1:99:ee:05:95:e6:cb:b6:83:d0:4c:
         cd:c1:c4:70:6c:8a:3f:89:f5:5c:b0:0a:a8:c6:dd:d9:b6:d1:
         38:24:5c:a5:d9:91:8e:84:24:71:8b:c0:d1:75:63:ec:b8:da:
         05:96:7a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:48:27 2026 by rpki-client